Define authorization tests for the ESCAPE Datalake

[andreaceccanti]

Goal

Assess ESCAPE data lake sites compliance with ESCAPE namespace authorization proposal.

Tasks

• Add the ability to test multiple datalake endpoints
• Provide integrated test result report
• Integrate with CRIC to fetch list of Datalake endpoints to test #3

Tests

Unauthenticated access

• Verify that access to the ESCAPE storage area is forbidden to anonymous clients #9

Token based authz

• Verify that no access to ESCAPE storage area is granted to clients presenting a IAM escape token without group or storage.* scopes #5
• Verify read-only access to ESCAPE storage area is granted to members of the /escape group #6

VOMS authz

• Verify read-only access to ESCAPE storage area is granted to members of the /escape group